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7£tC, m (Nr* 9-1) -9">f *;1/JCJ3V%T, 1 2 8bfy h ©Shift Row^g|#L 
aSrUff'tSc r©££. 312-fer 2 0 3©-fely^*^gttV%-rti©^gT* 



1 3 
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[0 0 3 8] 

m (Nr* 9) 1f-f H (Nr* 9 + 3) ^/l/Tftt, Round KeyfltHft^tJl 

*f^l^;*#*Shift Row^@IJ^2 0 6iZfeffi2tlT^Z>7 : -**:S 2 hf>y h 
foi/7 h$t^^P>^a}l/t^2tI/^^ 2 0 3 £:frL, TIM Round Key^n 
#£[IIJ&2 0 4 {CA^-tSo fl&lt^-^-fel^* 2 0 51CJ: UsKRStl 

S^-^$:iiX^^rL--;i/^S^e>^$tl-5t£^:lti:-rsr^T% Hi Round Ke 
ytoWm®2 04{C.£&321^ h#©Round KeyiunmMZimfi-t Z> Z. 
Z> 0 UlRound KeyMnm&2 0 4 K V%TRound KeyfltHTglJl £ tlfcSIJMgJllW: 
, 3 2 fcT^y h#Kltf»l8ri/$?;*#a*Shift Row^&|g8& 2 0 6 h £ 

*xfc#£&llft3*lSo r©rtiCJ:y, fH (Nr*9) -9-^9JV~m (Nr*9 + 3 
) "iJ->f */l/T% Round KeytiunmmzmftLtc 1 2 8 \Zy h (DfiLMmgktftpmis 
$?*#^Shift Row^gH@n&2 0 6lZfeffi2ft& 0 Z\<D£$IZVT. m (Nr* 9 
- 5 ) U->f (Nr * 9 + 3 ) 9 JV<D ;i/T**»ound#l3l#!l 

[0 0 3 9] 



1 4 
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[«3] 



Round 


Cycle 




SELB 


0 


000-003 


RounKeyifflW 


a 




004 


ShHtRow3£& 


b 


1 


005-008 


ByteSubg£g| 


b 




009-012 


RounKeytQS 
MixColumn3E& 


c 




013 


ShiftRow^m 


b 


2 


014-017 


ByteSubg£& 


b 




018-021 


RounKeyAnH 
MixGolumnMS 


c 








\ 




(Nr-1)*9-5 


ShiftRowM 


b 


Nr-1 


#1 


ByteSub£& 


b 




(Nr-1)*9 - ! 
(Nr-1)*9+3 


RounKeyJOS 
MixColumn^JH 


c 




Nr*9-5 


ShrftRowM 


b 


Nr 


#2 


ByteSub&Sl 


b 




Nr*9- 
Nr*9+3 


RoundKeyJfl^ 


d 



#1 :(Nr-1)*9-4 - (Nr-1)*9-1 
#2:Nr*9-*-Nr*9-1 



[0 0 4 0] 

RoundOTte, f2tl/?^20 3 0tI/^^&g^ai:tTf IRou 
nd Key#n|nmS&2 0 4 {C J; »J Jfc*H©*3Mya&g£fji- £„ f ltV^^202 
CJ:tJA*V^^2 0 1 fo<DX±'T- #£3.2 if y h#tCjg#* UTI 1 Round 
Key#n|||IIj& 2 0 4 tCA^U §iX^:x-;i,^e>A;d3*l£Round Key© ? 

3 2 tfy h^c^aisti^fiS^cit^iin^a^^fft^o Iltl/^ 

x >r v =l - a,b & e> xti z ti z> m*m<z> a#jh % m^t mo & k xtt -r s z. n t 

IRound Key#U||®5&2 0 4 tC J: 2>UaWmm*mft~?2> Z. £T% ff!00(H*->f * 
^003-9" ^;i/©4 -if>f * 1 2 8 t^y h ©fltJg^n y ^ lC*ff S Round KeyiJD 
^SSrUfft-SZlil^T^So fill Round Key#nf|£|ll{?& 2 0 4 IC J; 
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3 2tfy h#{Ccmi^:*#^Shift Row^[Hj&2 0 6 IC|B^«J»S*1« 

o 

[0 04 1] 

Round lttl Shift Row^^, Byte Sub^^, Round Key#|J^ Mix Column^ 
$?X#SfcShift Row^aHrS&2 0 6 lCfc^T> 1 2 8 \fy h#&TShift Row^^ 
mitlS* fl21zl^#2 0 3©izl/*#&g&V^*ltf>fcg-e&oT ; k 

[0 04 2] 

mz, moottjvjv-mosv^zjiT^ m2±\/? * 2 o 3<di*i/9 $&n 

£b£U tfUgi^X^Shift Row^mJi^2 0 6 lC&M2*iT V^^- # £ 
3 2 tfy h£i±&#£^#ffiLTByte Sub^g|0&2 0 7CA*tS 

. r<Z)h^, j&Ull^-^-feU'** 2 0 5KJ: yM^tlS^-^^O"^-^ 
£T% miRound Key2in|£|l!jg2 0 4 £ VX^ffi!£i-£ 0 Byte Sub^$HHS& 2 
0 7tCj:SSIi¥J|g^tt, 3 2¥y hmztym #|fcShif t Row^mg& 2 0 

6Cj)H2M&*ft£*l£o rC0«^*, ^im<D&m&mm£teZ>&Z> KByte Sub 
&*!»«&2&fT'r&%©*e&*.K fftfimtftj*"*-*. CKDdfclcJ:*;, 12 8^-/ 
h(DByte Sub^^a^Tfctl, {ftlllif«3ytf>m ^ ^X #3fcShif t Row^mj^ 
2 o 6{c*&5N*l$tiS3i:i:^So 

[0 0 4 3] 

^;i/~^012-b"-f ^;i/-e«. Round KeyljnW^fS^ cfct^Mix Column^ 
m^S&lltfrSc litlt *ffgi^X**Shift Row£&iaft2 0 6M£*ft 
SftTV^T 5 — #&3 2 1^^/ hfo^7 h3i*&#£>^*mbT^2Round Key 
in^£HI]^2 0 8{CA*tS 0 M*-?-** \s9 9 2 0 9 \Z «fc UjKRS 

#2 0 3GDizl/?#&fi£c£LT> Mix Column^g!®8& 2 1 0 (Dffi;fr£fl2 1z 
U^^f 2 0 3 $:^L/T^lRound Keyi0l[illg&2 0 4lCA*-r^o 3tf>£:£, J& 
H^-^-fe 2 0 5 VmiRZtlZ'r-Sl^O" £-t&Z\£iZ£ *J, S& 1 R 
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ound Keymnm&2 o 4 z^xvwmtirz. z.<om&&. m^itm z.&$m#ji 

<DZ.MZ£V, ^2 Round KeyiaM-M^ 2 0 8{Cj:£Round KeyMW^M ilMix Co 
lumn^g|[llji&2 1 0{Cj:£Mix Column^#t3S&l^fT L£ 1 2 8 
^tftpmisPXtMShift Row^tmi^2 0 6lC=&*ft£;ft£ 0 ZLVZolZLT. 
£1004-9" >f ^;i/~^012-9--f 9 U">f 1 o©Round#t3l#|gfT£*l£., 

[0 0 4 4] 

J£*T. g!2Round~^ (Nr-1) RoundlC&VNT, % 1 Rounds mU^mM^M 
(fe^U NrJia^Round^S$r-g-tfRound^tg|©^»;jgbiaiS[T^y, ^ 

[0 0 4 5] 

gl (Nr) Round (ft^Round) Ttt, Shift Row^#L3l, Byte Sub^g|#t3i % R 
ound JLeyfiQWmmZmfitZ* 

r©£»K:, t^Nr* 9 - 5) -9--f *;WC£^T, 1 2 8 fcf y > ©Shif t Row 
WZmmmZmft-tZ* r®ilt, ^2 1*l/*#2 0 3<DiZl^#&gteV^;riCD 

[0 0 4 6] 

m (Nr*9-4) •VJtJls-m (Hr* 9-I) *;WC*3V>T, f 2 
2 O30tl/^^t^g5: b £ U t^W #i£Shif t Row^g|[g]8 2 

0 BiZ&fflZnT^Z^-tZS 2Vf-/ h 1*0^:7 h b^ffi UTByte 

Sub^g|mi&2 0 1\ZAJ]-? 2> 0 Z\(D£%. HQW-T-Z-tU?* 2 0 5KJ: US 
^3*l£-T r -#£''0"i:-r£;i:£T\ 1 Round KeyfinSia5& 2 0 4^^^1 
£t-&„ Byte Sub^Pg|lSi&2 0 7(Cj:^?|I^tt, 3 2 If y Ymz^^VV^ 
#*Shift Ro W ^mg&2 0 6CJlB#Cl&$r3*l3o Z.(DZLh\ZX l J . 1 2 8.lf y- 
hOByte Sub^«ig|^f*)4x> ?SWSg^*^^^X^^Shift Row^EIj& 
2 0 6 icte^sti* 

[0 0 4 7] 

£5 (Nr* 9) (Nr* 9 + 3) -fr>f ? )VT*te, Round Keyio^a 
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^Hgi^X^lftShift Roi«3E3t|gn&2 0 eCteM^tlTV^^-*^ 2lfy 
f h$^^e>i*aj IT! 2 t l/^ 2 0 3 Sr^-LT^lRound Key#& 

IIK2 0 4icA*i"So 3(Z>££, itHT^-*-* # 2 o 5 tc<fc y jg^sti 

Sf-^Si^^a-^P,M$tlSl^ittSIilT% mi Round Ke 
yi0^iaS&2 0 4 {C<fc£ 3 2 fc? >y h#(DRound Key^U^SS:^ & d £#7?^ 
6. ^1 Round Key#nmtm8&2 0 4 iCfeV>TRound Key;&n##tJg£ *lfcSU**g3U4 

, 3 2 try h#ictmi"s;;*#Sfcshift Row^mg&2 o 6 iz^ti^etn/y h£ 

dCDdillCj: »J\ m (Nr*9) y-JlnV-m (Nr*9 + 3 
) if>T^;VT% Round Key^^SI & l^f L£l 2 8 fcf y h ©MII^^W I' 
iy^^mshift Row^aiaS2 0 6 lCfe*ft£*l£ 0 ^(Z)j:^tCLT. H (Nr* 9 

-5) -9->f^;i/~m (Nr*9 + 3) -y--r * ;kz> 9 -^>r ^ ;i/-eft^Round^ta^H 

*K<tl^^^*Shift Row^iaj^(Dl^M$:0 5}C^-r o 
[0 0 4 8] 

m?J4. 8tf-/ b^T^S^r^^S/^ h^^X^S:4^ig^fc^i:^o 
T^S. l#gtf)$/:7 hi/ $7;* #14, 4o07'Jy^7O>y^3O 2, 3 04, 
3 0 6, 3 O 8#Jg&S^34l*#/*T?fcy, #7'J ^7D^3 0 2, 3 0 
,4, 3 0 6, 3 O 8Kte*tl"etlAj]Zm%l-?Z-Z l> ? * 3 0 1, 3 0 3, 3 0 
5, 3 0 7^gi$tltV>5. l#gtf)-fe 3 0 1 ldt4. ATJ^-^INOil 

7U yfyUvzfS 0 2(Z>ffi7J£#Aij£*lT*S*J *lfr-#S7lf'y7 , .7a 
y^S 0 2lCA7J-t££e>tC;g|j?fc£*lTV\S 0 2~4#|Otl/^^30 
3, 3 0 5, 3 0 TlCli^tl^tltff^©^ U 9 7"7Q y^3 0 2, 3 04, 3 0 
6©ffi7Jfci:tf:7i; -y^Z7U -/7^3 0 4, 3 0 6, 3 0 8 ©ffi7j£#A7J£*lT 
V^tlfr— ^*7U ^77 0 y^3 0 4, 3 0 6, 3 0 8 fCATJt" £ cfc 5 iZ 

[0 0 4 9] 
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2#@<Z)^:7 hWX#it. 4^7'Jyy7D^3 12, 3 14, 316 
, 3 1 8^Mii$tl5i^^y, #7'J 77"7ny7°3 1 2, 314, 3 
16, 3 1 8tC«^;ft^ ? ;ftA7J£j§#^<5-fe U>7# 3 1 1, 3 13, 3 15, 3 

1 7#j$K3nTV*«. l#g(Z)iZ $ 3 1 1 iZlt. AlJT-$lKl£ 7'J V 
7*7n77°3 1 2©ffi^j^J:tJf7 U 7 7'7D»;73 1 8©3iiJ^A7J$^tfeU 

, 2~4#I01Zl/7^3 13, 3 15, 3 1 7 ICte^tl^tlf&mtf)^ y >y 7°7 
0^7*3 12, 3 14, 3 1 6©ffi7J^J:t) f 7'J*/7°7n>y^3 14, 3 16, 
3 1 8©m*i:^A77$tlT^y VN-Ttl^-^^^y y7°:7n>y:7°3 14,31 
6, 3 1 8lCA;fr-t£i:3lC«/£2*lTV^ 0 
[0 0 5 0] 

3#@CDi/7 4o07y>y77O'y7 , 3 2 2, 324, 3 2 6 

, 3 2 8 ^ , #7 <; 7 ^7 D «y ^ 3 2 2 , 3 24, 3 

2 6, 3 2 &\Z\t*:fr^frAJ]*LM%{-tZ>1>. \s V & 3 2 1, 3 2 3, 3 2 5, 3 

2 7#g^$;TlTVx£ 0 1 #Btf)iz I/* # 3 2 1 IZlt. Kti^r- # IN2£ 7 y * 
7"7D>^3 2 2©ffi*^ilF7'J ^77D>y7°3 2 6 ©ffiTJ^ATJStlTfe U 
v>-Tti^— ^&>"J yzfyuvfa 2 2 lcA;fr-t£ £ e> lc=f§/&3;ftTv^ 0 

, 2#@<Z)iZlx?# 3 2 3lC«ta^(D^y *;7"7D*;^3 2 2©ffi;fr. 7'J^7" 
7n>y7"3 2 4©m^J^i:tJ t > M J 7 7 , 7n>y7'3 2 8 <Z>m7J#A77£*lT 33 »J V 1 * 
f*l*-*fe7'J V~3~7Y1 y zf 3 2 4 &CA7j1-£ «fc ? IC«^$ tlT V^S 0 3$g 
C9iZl/^# 3 2 5lCteirfm<Z>:7 y v^-yUVfZ 2 4 <Z>ifi?J> 7'J 'y7°7D>y7 

3 2 6©ffi?j£J:tf >y7°7n>y^3 2 2 ©m7J#A7j£*lT£ »J V^*lfr- 
*l:7'J7^7n>y^3 2 6 KA±-?Z> J: ? £#j££*lT V>£o 4S@0tl/7 
#3 2 7lCttfff@0D^y vzf~7U vzfZ 2 6 ©ffiTJ, 7'J«y^7D'y^3 2 8© 
m^^cfct^^y 7^7D>y^3 2 4CDm*^A7J$tlTfcy VN-Ttl^— 7jS:"7y 
y^7n»;7 , 3 2 8lCA;fr-t£<k-5K^j&;*;*iT^£., 

[0 0 5 1] 

4#@©i/7M/^^H 4offi7'J>y77D'y^3 3 2, 3 3 4, 3 3 6 
, 3 3 8*mt^5»i5:>J, ^7'J ^77n<y73 3 2, 3 34, 3 
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3 6, 3 3 8lZl$*tl?frAjjZmjR-t2>'t I/** 3 3 1, 3 3 3, 3 3 5, 3 
3 7tf&m2ftT^2> e l#B(Z>-fc? I/** 3 3 1 iCtt, ATJt 2 - Z IN3£ 7 V V 
•?7Uyzf3 3 2©m*i3i:^7 U y^7D vzf 3 3 4 ©&7J#A772 tiX £ U 
VN-TtV^— #£:7y v^7ll»^3 3 2 KA^-S <fc?{C#/&$*lT^£ 0 

, 2#s©iri/^^ 3 3 3ici±itf^©7i; ^y^ny^3 3 2©m77> vvv? 

yuvzf3 3 4©ffi77;J3J:tf:7y VfyUvzfZ 3 6 ©ft;fr;#A#£*l v C;J3 y v% 
7U y7°7D«y7'3 3 4 iCAAf £ £ 5 tlT V%S„ 3#g 

3 3 5lC«Btf^«>7U *;7*7D^7'3 3 4 ©m77> 7'J >y7"7n >y7' 
3 3 6tf>ffi;fr;J3<J:tf:7y »;7"7n*;7"3 3 8 <Z)ffi77#A7J3 tlTfe U V^tlj^— 
^r§:7'J^7 0 7n«y7'3 3 6 lCA*i"S <fc "9 lC*if£$ :ftTV^ 0 4#g©-fel^ 
#33 7tC«ftf^©^ »J ^770^73 3 6 ©ai7J> 7'J »^7Dy^3 3 8© 

m^s^o^y vfyuvzfz 3 2©m7j^A77$nrfey vA-rti^— ^$:^y 

>)/7*7D^73 3 8 ICA^S <fce>{C«f&3*lT^6„ 
[0 0 5 2] 

ftcD^-#£A;*7-r£3£T% #-9->r ?;wc&^T3 2t?y h^^^tastifc 

■^-^^^-T-SZlil^T^Sc 3btC #tV^^3Ol~3 3 70tl/^3f 
&fi£MCbT. #7U>y7 0 7n77°©f-^?:Wc^7h$*t)0 > A*-? 

2 8tf>y hO^-^SrAiJfSZlt^T^-So 1 2 8bfy h <Z>^- # X±i^%~7 
Lfrm&. 11M ^;VBlCA77^n^4 Otf) 8 tfy h^-*^ ^ti^ti^y^y 
77D>y7*3 0 8, 3 1 8, 3 2 8, 3 3 8 \Z=y y ^ StlT ^£ 31 £. £ 
[0 0 5 3] 

^tcshift Ko^mommz-D^TWimtz* 

Ri jndael T;i/=f V XATtt, ATJ^- # £ -etl^tl 8 bit©-?- # a00~a33lC 

^otv^ 0 ^^T-ii, ^T—& (bt&MM. ^column mwmnL. mmt 
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[0 0 5 4] 



Row ► 



Column 



aOO . 


aOI 


a02 


a03 


eld 


all 


a12 


a13 


a20 


a21 


a22 


a23 


: \-a30 : :. ; 


a31 


a32 


a33 



Column 



Row 



▲ 


aOO 


a01 


a02 


a03 




a10 


all 


a12 






a20 


a21 


a22 


a23 




a30 


a31 


a32 





ffi*Hfc 



[0 0 5 5] 
[0 0 5 6] 

shift Rov,m&mmT*iz. m^mzit. m4&izmznT^z>£otemF}e> 

5fC^J:^{C, l^SS:^©*^i:b> 2*f@£;£lBytea-^- hi/7 K 
3?TB&:£2Bytea-^- K 4 f?@ 3 Byteo M>:7 h^S,, 

[0 0 5 7] 
[^5] 



aOO 


a01 


a02 


a03 




aOO 


aOI 


a02 


a03 


a10 


all 


a12 


a13 




all 


a12 


at 3 


alO 


a20 


a21 


a22 


a23 


*2ByteQ-f-hy7F 


a22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 




a33 


a30 


a31 


a32 



[0 0 5 8] 
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So A^WlCli. ^6iC^t-<fce>lC, l«S£^-(Z>;i;;fc£U 2frB£:£3Byte 
n-r-h^7b, 3??S&£2Byten-^- K 4 1 Byten - 

[0 0 5 9] 
[*6] 

[«#<fc] 



aOO 


a01 


a02 


a03 




aOO 


aOI 


a02 


a03 


a10 


a11 


a12 


a13 


£3ByteP-r-hv7h 


a13 


a10 


all 


a12 


a20 


a21 


a22 


a23 


ft2Byten-r-hv7h 


a22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 


a£1ByteP-r-Fv7h 


a31 


a32 


a33 


a30 



[0 0 6 0] 

V*TV*<&„ ZOZtfrb. 1 2 8 My h # tf>A7J#^7 L fc^^T, 

©t>f ^ ^t'A* $ tlfcf - ^ >J >y ^7 n ^ ^ 3 0 8 , 3 1 8, 3 

2 8, 3 3 8{C^y^3*lT33lK mWiO)-?*) v-JvUv-JlzmiZ^-Z-ft^y 

T-xzmmLWi-tt. m^m&shut Ro*#immzm7 <d&<d£z>&]&M}i 

[0 0 6 1] 



2 2 
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mm®. 



a03 


a02 


aOI 


aOO 




a03 


a 02 


a01 


aOO 


a13 


a12 


all 


a10 


eiByteO-T-hv7h 


a10 


a13 


a12 


a11 


a23 


a22 


a21 


a 20 


^2Byten-f-h>7h 


a21 


a20 


a23 


a22 


a33 


a32 


a31 


a30 




a32 


a31 


a30 


a33 



[0 0 6 2] 

B ;£ £U 2ffS£;£lBytea--r- hi/7 K 3 #B &*2Byten - 

r-hi/7h, 4^SS:^3Byten-7 1 - hi/7 hfsrilfc&e. 
[0 0 6 3] 

*lfflllU^*UEShift Row^g|igj&&M^T#^l^#£^M^U 12 8 
[0 0 6 4] 

1 #@CDRow£oV^«:. h V>£&>, 3 0 

3, 3 0 5, 3 0 7©tW^gJai:t5. 2#B©RowlC^>V>Tta, *1B 
yten--r- h ^7 h ^H^f-T^fe^lC, 3 1 1 CD-fe 1^#&S£ c £ 

I, ^tlJS-Wca-fe 3 1 3, 3 15, 3 170tl/^^fefi$:btt5 o 3 

# @ CD Row IC oV^TJi, =&2Byten-^- h^HlftS^^ =g--fel/# 

#3 2 1, 323, 32 5, 3 2 7 C0i2 \s V c £f 3„ 4#@©Row{C 

OV>T«U ^lC3byten-^~ b 2/7 b fcH??^ £ fc#)lC, #tl/^^331, 
3 3 3, 3 3 5, 3 3 7ffltl/^^fit$:ci:t6 0 
[0 0 6 5] 

tfri£Lfc£e>&shift Ro W ^^s^^-r€>ifric^^-5>*^fiii/^^^*shi 

<fc 3 lC^tl^tlbOO~b33i:-r§ ^g-ffi^j^- * itm 8 CO^tC^I" J: e> SsffiWe 
[0 0 6 6] 



2 3 
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b03 


b02 


b01 


bOO 




b03 


b02 


bOI 


bOO 


b13 


b12 


bit 


blO 


blO 


b13 


b12 


b11 


b23 


b22 


b21 


b20 


3 


b21 


b20 


b23 


b22 


b33 


b32 


b33 


b30 


b32 


b31 


b30 


b33 



[0 0 6 7] 
[0 0 6 8] 



aOO 


aOI 


a02 


a03 




aOO 


a01 


a02 


a03 


alO 


a11 


a12 


a13 


^1ByteP-f-^>7h 


a13 


a10 


all 


a12 


a20 


a21 


a22 


a23 


52ByteD-r-K'7t 


a22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 




a31 


a32 


a33 


a30 



[0 0 6 9] 

^6 £mm<DU-T- hi/-7h*ft$*itolz&. ^9CD*IC^-Ti:e)ic. lft 
SSr^SfciiilU 2ft @S:^lByten-^- hi/7 K 3 ft B 2 Byten - 
t- hi/7 K 4ft g£^?3Byten-^- hi/7 h~? Z> Z £ 
[0 0 7 0] 

^X#^Shift Kon$mm&<D&1Zl/9 9(D1Z]//7 9&m*mfeLT. mSKm 

-r zo&m^itmc&vzu-T- ht/7 h^mt±< mvymzmft-t z> zlil 

[0 0 7 1] 

T}m.mtmztew z> shift Row^^sfc&M-f sc^tf-e^So 
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<Mix Column^^mB&> 
[0 0 7 2] 

r©Mix coiumn&mmm*4^><Dmimn$&3 5 1, m2mn^ 3 52,^3 
h^X'^m^m^mn^-^mimm^s 6 1, $2^362, ^3 

§1^3 6 3, I4ilf3 6 4t, 3 6 1-3 64 ©aj^jCDtfilKli 

m%iwin*mfi-tz>mom8&3 6 s^Tit^snT^s., ^<afl&GDSfi2^i?s§3 

5 2^4tI^3 5 4fCOV^%, Ha*LTV^V*#, fll fH3S3£~m 4 fH® 
^CD4o©mWlli:EX0R|l^^fg^P,tlTV^S o 
[0 0 7 3] 

(a0j,alj,a2j,a3j) T*#f££*lS^ j # g ©Column^ (bOj ,bl j ,b2j ,b3j) t? 
lumn©^-# (b0j,blj,b2j,b3j) ft, 7£© «fc ? JC^i" Z. £ tfi~C Z> . 

bOj = 02*a0j + 03*alj + 01*a2j + 01*a3j 

blj = 01*a0j + 02*alj + 03*a2j + 01*a3j 

b2j = 01*a0j + 01*alj + 02*a2j + 03*a3j 

b3j = 03*a0j + 01*alj + 01*a2j + 02*a3j 

bOj = 0E*a0j + 0B*alj + 0D*a2j + 09*a3j 

blj = 09*a0j + 0E*alj + 0B*a2j + 0D*a3j 

b2j = 0D*a0j + 09*alj + 0E*a2j + 0B*a3j 

b3j = 0B*a0j + 0D*alj + 09*a2j + 0E*a3j 

[0 0 7 4] 
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m 4 3£*# fC J: 3 m# 33 <fc t^EXORIlIJ^ tc J: S ^ W £ ff t> . 
[0 0 7 5] 

#$M3 5 1-3 5 4KH8We>tl<5.3RUC*3 6 1~3 6 4W:, 

So 

[0 0 7 6] 

*i*jh&3 5 i©»isfei*»3 e i-e«, A^tis^-^tc^LTOxt^ 

* £ *l£ -5 s - 3? tC*f h T0x03fg£ tc &0x0B>fgtf> V>"T;iX;frtf>^t#Rrtg £ o T V> 
£ e !3iM3 6 3tlt A*$tlS7 ; -^^C*fLT0x0m^7t^i0x0D^(Z)V^ 
"Ttl^CDmitA^lg^^oTVAS,, ^4fI^3 6 4T'H A^J**.^- # IC 
*f L T OxOl-fg £ «0x09fgtf> V ^ "Tn^ (DmMtf "Sffi £ & o T V% £ „ 

[0 0 7 7] 

K§2?l|fC#f 3 5 2ffi$lifHT^ A^^S^-^CjftLTOxOl^fctt 
0x09^©V%1*tl*>©^#^«rii^^oTVx§ o i2il«ttt, A * 3*1 Sir - 

# KM LT0x02^£ tz. &OxOE^^T;ft^CDiliJ|#^fg£ & oTV^§ 0 ^3 fUJt 

A^JStle7 ; -^^C*fLT0x03#^fe^i0x0B^©V^i x tl^C^)^*^or|g 
t^fcoT^S. S4il^ft, A#£*l£^-#{C^LT0x01#i;;U*0x0D^ 
© v x Tti fh (O ofli £ o T v % & „ 

[0 0 7 8] 

f 3^3 5 3©iliMTi±, AiJ^tiS^-^tC#bT0x01^tfeli 
0x0D^m>1*;Tifr©mil#^fg£fcoT^.5 o 2 iHH^T* ft. A^tiS^- 

Si^te, A^$n^^-^{C>^bT0x02^^fe«0x0E>fg(Z)V\Ttl^<Z)^W^"erig 
t^ot^S. ^4if^li < A;fr£*lS^-#tC^LT0x03>fg££fcJ:0x0Bf& 

© v n t ti <om%-ft «rtg a & o r v > s . 
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[0 0 7 9] 

# ic^- b toxoid * teoxoDfg© v*t*ti&a>3i*jFtf «rtg i:*otvx5 0 ^3 mw 

HT* t£, A# ^n-S^-^tC^fLT OxOl^f £ fc &0x09^<Z> V> ~f *l ^ «Tfg 
il^ot^S. f4il^ii, A*$^S^-^lC*fLTOx02^*fc^OxOE^ 
© •rti^cDm^ Bjfg £ & 0 T V > § „ 
[0 0 8 0] 

Z<D&5&miWin^3 5 l~i4H^3 5 4©f lH|tSI~f4i|[^© 
<Mix Coli»n$jftia&<Z>£|j(»> 

Mix coiwm$mm&*pK&t.tiz>mn$&<z>-w*m i i^-t* 

[0 0 8 1] 

A#£*l£ 8 If y h^-^ (a7,a6,a5,a4,a3,a2,al,a0) ICjItfU £&tgt (b3,b2 
,bl,bO) (DmM&ftolb&il-tZo ZL<Dm^. 8fcfyh^-# (a7,a6,a5,a4,a3 
,a2,al,a0) lC«»©#fcf«y h 5:^^ SS^SHtgU 3 7 5~3 7 8 fcigtfT 

*fLT, gP3H£StBgP 3 7 6 (Z)iHf|MJ|l£ 1 If y h 1/ ? V £ -frTfltJUT £il!J#t§ 
3 7 1, 3B3*tm3P3 7 7<Z)^||MIII£3<bJCllfy h $/ 7 h $ "STflUfM- £ 
iOmiS3 7 2, ®S^ISBSP3 7 8(J9it#r*£*3:3S>tC 1 If y h*/7 hZTZTtia 
W.-?Z>lMWmS 7 3 £fi|*TVN£ 0 ^3 7 3 ©St^* 3 7 

5, #*I^3 7 1~3 7 3t^-/t-70-lfc^rf 'J-^AA$^ BfcgtC 
*y»HCS*l«l»HC*3 7 4#^tfP>:ftTV^ 0 
[0 0 8 2] 

rtf>J:e>&fi$;{Cj:*;, mm (b3,b2,M,bO) fcUt, fl&^fWJCfctf ««» 
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[0 0 8 3] 

(b3,b2,M,bo) tLx±y hzti&temt. m&Ltc£o^ &mn$&iz-D 

^T2o1*0^£;ftTV^ 0 #^^{C iStl Z>mWl<DM&'kt>1±iZ. (0x02,0 
xOE) , (0x03, OxOB) , (0x01, OxOD) , (0x01,0x09) <D 4 M »J T'fe U . Zltlfc 
T&4 hfy hx-mm-t <Sil, (0010,1110) , (0011,1011) , (0001,1101) , ( 
0001,1001) £fc&„ r(D<fce>&#£$cic33v*T£M-r<5t^y holIiiM© 

[0 0 8 4] 

ft&tf (Oxoi, Oxod) (o 

001,1101) £&*J. _tfe2 bfy h(Z)g|S^©Sn^^$:T^2lf y h©gP#«lC 

tamtsi)^^ *mwt & z.£x% 2 o bruits 3 £ £ 

{fiSt (0x01, OxOD) <Z)ffi^*)-&©^lC^^-5EIl?&#mODM$:08 IC^t 
[0 0 8 5] 

08-eti. A*^tl-5 8 If y h"r-$ (a7,a6f|S,a4,a3,a2,al,aO) IC#U 

^1*D^3 8 KSffiTJtt, «Hns;y* 3 8 2 HI 2 flnJ¥#§ 3 8 3CA 
*£*iTV%& 0 3tf>gl2;&nJ|^3 8 3 ^ifctf)ftT&lf y hic^sas^a^ 
^S:5D^frS=fe(Z)T^oT, AtlZtlZ 8 tf y h^- # lC*f UT 3 If y h^V 

h $ -^Titiw^-a zmn t z> £ $ izmmz nr v^ s . 

[0 0 8 6] 

*IIJM&3 8 3©mil*§*i:miitIIH»3 8 1 »*.tF«2aD»»3 8 3-e^-A 
[0 0 8 7] 

ffilftl ni?^3 8 2 mWitfOxOl T*%>Z> m^K it. ±$L 2 tf y h ©ifCHMJH 
T?*S»1 JDJ|[»3 8 1 ©ttJ7J5:^2Jnm^3 8 3 lCffi7JL£V^ fff^D 
Z?y#3 8 2&. ««3««0x0DT?»S##lca:, _tffi2fcfy V<DmM&%zX~1b2> j m 
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[0 0 8 8] 

mf<3D^#(i^#^M(x) = x 8 +x 4 +x 3 +x+ 1 ttSGF (2 8 ) ± 
[0 0 8 9] 

m * t v =l - jvm <d m&mm<D — m z m 9 csvr. 

[0 0 9 0] 

zomxTp^-frmit. £ic, m*m%.i&ui?y?mi 0 1, a^gii/^;* 

* 1 2 0 fcitfUA^l'^x* 131 i:^e>lif££*iTv^ 0 

HA^J 1 3 1 (t 8I©3 2 fcfy h I^;*#k0~k7;fr£«j&3*l£ 2 

5 6 \f * h © 1/ V* # »; , V # kOfr e>Wmc 3 2 fcf y h #&Cf&5jft 

tl> Pf#H^l 9 2lf>y hCO^fC^l/^X^kO—kStC^-^^^l^tl. Bf# 
[0 0 9 1 ] 

HAiJl/^X^l 3 llCte, ^-lx^x^kO—k7©e)t)V>-rtV^l o CD-fit 
mzftjj-tZ-t Is?* 1 3 2#g^£*iTV>£ 0 ^CD-fe 1 3 2&, HA* 

1 3 1©2 5 6 lfy Vr-$frh3 2 tf y h©f-^$:Mtt^» 
t/S>;** 1 2 0(D*T^lCA*-rS=fe;©7?feS o 
[0 0 9 2] 
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UPyVBl 0 lOmjjZmXl-t&'ZU?* 1 1 3 ©ffi>WA;fr£*l£o 7'j 9 
77 D 9 7*1 2 8tf>ffi77W7KEY&, 71)^^709^1 2 7 ICA7JS tlT ^S. 
7 »J 9 7*7 O 9 7" 1 2 7 oai7JW6KEY«, 7 U 9 7*7 n 9 7 1 2 6 Oifj^lCfeS 
1 1 2 lCA7J$tlTVN^ 0 -fel/^^f 1 1 2 1C&, 7'J 9 7*7 O 9 7*1 2 
7<Z>ffi#W6KEY£&*g|£j&D^9* 1 0 1 H ft All £ tlT £ U > ^?tl 

M&7'J 9 7"7ny7"l 2 6iCA^7-rSa:e)lCfil^StlTVNS 0 
[0 0 9 3] 

7 U v 7*7 O 9 7° 1 2 6 0>ffi;*jW5KEYte, 7'J , y77D , y7"l 2 5 iCATJ^ft 
T 7 y 9 7*7 U 9 7° 1 2 5 ©m^W4KEY«, 7 y 9 7*7 n 9 7° 1 2 4 CDfrf 

^fc&£izi/?# ill ica#£*itv*s 0 tup* i i i icte, 7 y 97*70 

9 7*1 2 5©ffi;frW4KEY£f£Ait£s£o^9? 1 0 1 <D ffiTJ £. tfAJj £ *lT £ U 
, wr*l#— #«:7y 97*70 97*1 2 4 KATJ^S <fc 5 C^^tlT V^„ 
[0 0 9 4] 

7 'J 9 7*7 D 9 7° 1 2 4 (Dffi7jW3KEYte, 7 V 9 7*7 D 9 7* 1 2 3 lCA;fr Sft 
T V»-g> 0 7 U 9 7*7 O 9 7* 1 2 3 CDm7jW2KEY« > 7 y 9 7*7 n 9 7° 1 2 2 £A 
;d£*lT^<5o 7y 97*7 0 97*1 2 2(Dm^?WlKEY«, 7'J 9 7*7097*1 2 
1 ICA;£J3*IT^.5 0 
[0 0 9 5] 

Ml 0 2, ROM1 0 2^b^^m$nSffi^fsm##RC0N#ENi:CDi&a*^ 
fcff^ANDBI&l 0 3, fi£A!$i^7x* 1 2 0 <Z)«_t&lC&g-r S 7 y 9 7*7D 
97*1 2 ltf>ai7JW0KEY£ANDliIj&l 0 3 <0m7J^A7JSnT#f£65i&S5ftlMit5: 
^f-rSEXORHIS&l 0 4 &-£A,T?V^ B 
[0 0 9 6] 

£ 7c, }ft:*ii£f&a S?y^»10 1tt, 7 y 9 7*7 O 9 7° 1 2 1 ©ffi^jWOKEY 
, 7y 97*7 0 97*1 2 4 ©m^jW3KEY, 7 y 9 7*7 O 9 7° 1 2 6 0>ffi;frW5KEY, 
7'J 9 7*7097*1 2 8 ©ffi7JW7KEY^A^Stl, V*-f*l;fr 1 O IZ ffiTJ 

l/^ # 1 0 5 £#A.T^£ 0 -fc # 1 0 5 ©ffi;frte, -5*— -r— 
2/3>M3a$rf?e)Rot Byte®J& l o 6 , -fel/?#10 7, 1r U>> # 1 0 9 IZAJj 
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£*lT^& 0 -fe l/? # 1 0 7 jCtt. Rot Byte[Sj&l 0 6 <D&>jj Is 9 $ 1 0 5 
©ffi^J^A^JS4xT^y> VxTtl^5:Sub Bytetgj&l 0 8lC^tS„ Sub Byte 
EJ8&1 0 8it 3 2 fcfy h^OByte Sub^#t3g£|g?T'r<g> »J „ ^tf)* 

1/^*109 lC#y&-f-<&o tl/^n09it Sub ByteHIg& 108 

tizv?* i o 5©ffiij^A^^ti, vN-f^^-^$rm*-rs 0 ift**^nS? 

>^®10Ut EXORtUS&l 0 4©ffiij^-fe 1 0 9©tfj##A2f3*u tff 

fl&Wt&aftI«#&ISf?*SEXOR|S» 1 1 0 ZffiitT^Z* 
[0 0 9 7] 

Round Keyia^atcmv>s^A«©^^ ©^imiz&rt zmxii v v * # 

[0 0 9 8] 

=ytJ^ K^T>^S/3>^5©Round Keyfln^tag-ejg V> e>tl-5 Round Key&, £| 
^2 5 G\£y htf>^&Tli> Initial Round Key^Round Key01~Round Reyl4<Z> 
-a-tfl 5<@<&I^fc£ 0 #Round keyltmm^Uv^^ZMf^hX 1 2 8 tf y h 
T?*^S*lT*y, £t:*^i-;i/$T*£j&3;tX& 3 2 bfy h ©Jfc^T^Roun 
d key£3fc^-r£fc#){Ctt, W00—W59© 6 0^<«*ii#&M£fc£o ZIODJ:? 

&fft:*ilwoo~W59&i, Bir-^>fb^fciiW0O-W59©jii{c^M$ti, m-SHtt$ic&W59 

00-W59©|lllC^liS:^-rS^i:%;lC, tg-SfftB^K: fc^TW59-»W00tf»l!mc|fe 
[0 0 9 9] 
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IMl 0] 



No. 


| g*3lP 




fin 


WDO=(k0) 




01 


WD1=(k1) 


WOO 


IK 


WO2=0t2) 


W57 


113 


WW-JW/ 


W56 


fM 
U*l 




W55 


05 


f»U0 = \K0J 


W54 




vvuo=u<oj 


W53 


07 


wu/=w// 


W52 


08 


UrtTQ— WUfVk'^Q, ,KPuljL^P-tD.ifn AimT\Vn r < 1 

Tfuo=?vw SMJbxSyteUwtsytelWQ/Js RconllJ 


W51=W59 VV58 


09 


W09=W01"W08 


W50=W58~W57 


m 
■u 




W49=W5 / W56 


11 


Wl 1— wuo WlU 


W48^=W56*SubByte(RotByte(W55))"Rcon[7] 


12 


WiZ=VVu4 SubByteCWll) 


W47==W55~W54 


13 , 


W13-WU5 W1Z 


W46=W54~W53 j 


14 


W14=wuoW13 


W45=W53' > W52 


15 


Uf 4 l_ lftWV'l~IMI 1 4 

W15=Wu7Wi4 


W44=W52*SubByte(W51) 


16 


Wl 6=3*08 SubBytiKRatfiyte(W15)) HcontfJ 


W43=^W51"W50 


17 


Wl 7=W09 W16 


W42=W50~W49 


18 


W18=W1(TW17 


UM] =WdQ~WAfi 
• — f»*rCf fT*rO 


19 


W19^W11^W18 


W40=W4a^SabByte{RotByt e (W47)rRcon[6] 


20 


W20=W12"SubByteCW19) 


W39=W47~W46 


21 


W21=W13~W20 


W37=W48~W45 


22 


W22=W14"W21 


W36=W45~W44 


23 


W23=W15^W22 


W35=W44~SubByte<W43) 








52 


W52=W44^SubByte(W51) 


W07=W15~W14 


53 


W53=W45~W52 


W06=W14~W13 


54 


W54^W46"W53 


W05=W13~W12 


55 


W55=W47"W54 


VWM=W12^SubByte(W1 1) 


56 


W5e=V^~SubByte(RotByteCW55)rRconn] 


W03^W11"W10 


57 


W57=W49*Yf56 


W02=W10~WD9 


58 


W58=W50-W57 


W01=WD9~W08 i 


59 


W59=W51"W©8 


WW^VV08^SubByte(RotByte(VV07^ 



Initial 

Round Key 



Round 
KeyOI 



Round 
Key02 



Round 
Key03 



Round 
Key04 



Round 
Key05 



Round 
Key13 



Round 
Key14 



[0 10 0] 

mp#ffc«r<Z>fi£^C»W08». W08=W0(TSub Byte(Rot Byte (W07) ) A Rcon [1] 
(D^lZ^zVs WOOilSub Byte(Rot Byte(W07)) £j£$5:Rcon [1] £ ©gftffilftiSrSSftfT? 
WmZftZ* L m L=k£^*>&R*$m<?&£. mJzmUQOlt* W00= W08*Sub Byte( 
Rot Byte(W07)) A Rcon[l]T^^tl> W08£ W07fr %&f&T*% Z> Z £ #;fo3^£o £ o 
T> — H.. W00=>W59£T*£/&LT. P|p^>fk©^^^(Z)JlH#w59=>W00 

[0101] 
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3tl OKjjk-tZoiZ&^yy F^Round Keyi0#-e4M©*£^Cli(32bit#^)^ 
Ifcfclltt^tf > K77>^ ^ 3 >GDMix Column^gl + Round Key^^t 

Zfl2 1 ©m^WOKEYfcfflV^o 
[0 10 2] 

fft^Cll^ffta 5>V 1 0 1 CD* V9 * 1 0 5 (SEL#B)&, gll «fc "5 

Jfi^ll^n^y^^i o l<z>m*^«&S4x-5-fel/^^ l l l, 112, li 

3 (SEL#E~SEL#G) H;RICS"^T, ^ 1 2 © J: o Kmfe £ *l£ . fcj£U 

&g«b#jg#*;**l£o ££>IC, tl/^3!1 0 7, 1 0 9 (SEL#C~D) *13 
lC^-TJ;e)lC, #J£*lt©£f&igr33lCj: Vty*)mZ.fflffijbmt>frZ> 0 ROMIO 
21C&, EXORlUg&l 0 4 lC^$tlS^mRcon[i]^^,$tlTfe^> T K 

i#%c^-r-£»#^Rcon[i]^i 4 K:^£e>ici&*ft£*iTv^ 0 

[0 10 3] 

[in] 



SEL_B$!I&I 



M 






128bit 


W3KEY 


W1KEY 


192bit 


W5KEY 


W1KEY 


256bit 


W7KEY 


W1KEY 



[0 10 4] 
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mi 2] 



SEL_E~SEU_G{&lftl 



M 


SEUE 


SEUF 


SEUG 


128brt 


a 


b 


b 


192bft 


b 


a 


b 


256bit 


b 


b 


a 



[0 10 5] 
[*1 3] 



SEU_C~SEU_D$]$I 





SEU_C 


SEU.D 




WENV[i-Nk]~W[i-1] 


* 


b 




W[i]=W[i-Nk]~SubByte(W[i-1]) 


b 


a 


m 


VV[i]=W[i-Nk3~SubByte(RotByte(W[i i -1]))*Rcon[i/Nk] 


a 


a 


Byte Sub 


c 


b 



*: don't care 



[0 10 6] 



Rcon ROM-7 — 



Rcon _Addr 


Hex 


Bin 


01 


0x01 


0000.0001 


02 


0x02 


0000.0010 


03 


0x04 


0000.0100 


04 


0x08 


0000.1000 


05 


0x10 


OOOI.OOOO 


06 


0x20 


0010.0000 i 


07 


0x40 


0100.0000 


08 


0x80 


1000.0000 


09 


0x1 B 


0001.1011 


10 i 


0x36 


0011.0110 | 



[0 10 7] 
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<D#l^X#kO~k7<Z)fii$:n- 3 £ IZ£ o T. No.00~07;fr (Z>®MUtf 

&*misi?** 1 2 0©#7'J Vf-yuyzfl 2 1~12 8Cty h£*XTV^ 

[0 10 8] 

m^itmzisvz>m*mwo8\t. mi oic^n-c^s^e^c, wo8=woo*sub b 

yte(Rot Byte(W07))"Rcon[l]Tiil^t$'tl-5o Z\ (Z>W08=W00* Sub Byte(Rot Byte(W0 
7))"Rcon[l](Z)S|^^^{Ctt, 7'J yf^Uyfl 2 1 (Dffi^WOKEYtC ttWOO^ 
"fey h$tlTJ3U> EXORHJj&l 0 4lCA;fr£*l<5o 7 U >y -J"? U v 1 2 

8 CD m*W7KEYlC B:W07#-fe y h $ *lT £ *J > 3 (Z)W07#-fe l/?^105 (SEL#B) 
iCA7j£*lTV^„ 
[0 10 9] 

ROM 10 2 ODRconT K l/* fe"l"IC.U ANDEH& 10 3 [CAA$ *l£SBffi##RCO 
N#EN£>f *->OMCLT. Rcon [1] *WOO©M» £EXOR®j& 1 0 4 T^f V\ •Z&U 
JH£EX0Rlsn&l 1 OlCA*i"So — tVf ^1 05 (SEL#B) &jti©LfcWO 
7&, Rot ByteEJj&l 0 6 £Sub ByteHJSg 1 0 7 &C J; &jQMifi1ft>tl* Sub Byte( 
Rot Byte(W07)) <Z>W.n%£MmX0m$& 1 1 0\ZAJjZtlZ> o «fc^T, EX0Rtgg& 
1 1 OTfM:, W08=WOO"Sub Byte (Rot Byte (W07)) "Rcon [1] <DmWi)'fit>ftZ>o 
[0 110] 

mz, m*muo9=uovuo8<Dmw-mm$:Wim-rz> B M2=wvM8<Dwin-mi&mz 

tt, -7 U y y^l2 1 ©m^WOKEYlC^WOl^-fe ^NS^tfc»J, EXOR©j& 

1 0 4 {CZltl^A^7SnTVNSo 7'J^7"7Q*y7"l 2 8 ©ffi^jW7KEYC«W08^ 
-fey h$*lT£'J, -fcl^#105 (SEL#B) iCA^J^tlT V<5 0 ANDl§li& 1 0 3 
tCA7J$tlS^m'O#RC0N#ENS:5 ; >fir-^;i/tc:bT. 7'Jy7*7n«;7l 2 1 
*>e>A7J$tlSW01*^CD*^EXORISIg|l 1 0 ICA77$ *l£ <fc 3 iC^g^S,, Zl 
0D££, (SEL#D) #&mtfhlzmfe&tlT&*). -fe 

1/H105 (SEL#B) £jii®LfcW08#, ir i/^ # 1 0 9 bT-£©£ £EX0R 
0&1 l 0 IcA^^tiSo 
[Olll] 

iot, EX0R®J&1 1 OT'tt, W09=W01"W08©^*^ffctl-2>„ W10—W11, Wl 
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3~wi5=b m x^n^nmn-^n . 

fo*mW12<DWin.mm Z Mm -t & . &:*:iiW12=W04 A SubByte (Wl 1) Tf sine $ *u 
£©SIJ*©B8*&l$tcau "7 U V ^"37 □ yzf 1 2 1 CDffl^jWOKEYlC«W04^-fe y h $ 
*l, EX0RHJS&1 0 4 lCA*$nTV%-5 0 Jfe, 7'J ^^7D*y^l 2 8©{1}*B7 
KEYlC&Wlljtf-fey h£*lT£U-fcl^# 1 0 5 (SEL#B) iCAT^tlTV^o AND 
telJ^ 1 0 3CA*$tl-5^ffiM-^RC0N#EN$:T r >( > -fe-^;i/i:bT> W04#^(Z> £ £ 
EX0RHI8&1 0 4 \ZX±t*n Z>£t>Km& f 3 o — 2u tl/^107 (SEL#C) 
Tttirl/*#*fcfitf bMK£3*lTa3*;, (SEL#B) £iti®L£W 

1 0 7 (SEL#C) 5:^LTSub Byte[Hj}& 1 0 8{CAi]$tl5. 3 
©ZltlCj;*;, Sub ByteHIJ^l 0 8 J;£Sub BytefltJltf^frtK Sub Byte (Wll 
) ©MBM^^EXOREI^ 1 1 0lCA7j£*l£o ioT, EX0RIHS&1 1 Ot-ii; Wl 
2=W04"Sub ByteCWlDcDmm^fffctlSo 
[0 112] 

#ctc, ^^^©liA^ji/^^^ i 3 KDmmxt. m^t£.&^itmrtzft 

©l«^ft&U<tt«teffcJCflt;*., «A;&l/2;;x* l 3 HZ ferns tiT^&MXm 

tijmmitmizmi'pxz 1 2oizmm?zmf\?x$>2>„ 

[0 113] 

mAjjispx* 131 \zmv hztifem*m®mm*. ti/^^i 32 csel#a 

HC«fcy 3 2 tfy hJMfctf-^atl^n, tl/^^l 13 (SEL#G)tf)-fe 
#&ttb £i&ftbTJl£;*:gib^;*# 1 2 Oic-fey b$ti<5 0 Sfcfc&l/S?;** 1 2 
Ote, |fr^Lfe<J:e)lv:S>7 M/y^*=»^Tf* 7 V V -?-7U y 1 2 8 (FF 
7) => -7 U * 3^37 D>y^l2 7 (FF6) =>7U 7^7D7^1 2 6 (FF5) =>"7 U 
y 7°:7 n y ~f 1 2 5 (FF4) =>"7 V y ;7°:7 ny7°l 2 4 (FF3) =>7V»;7*7D'; 
^123 (FF2) =>7'J*;7*7Dy7'l 2 2 (FF1) =>7'J y Dy7l2 1 ( 
FFO) Ai:J/7MTlTf>. : 8i7->f ^;i/"T?^T©fi£^C|t^«ili^^$tlS 0 
fc, -fel^#132 (SEL#A) TfjBIKSnSftiA^-dtttttA* 1 3 

1 © U^X#k0,kl,k2,k3,k4,k5,k6,k7©ffi#-e&£>. 
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[0 1 14] 

K-D^xmm-t^ 0 mio<D&t>iz, m^tiz^xu. m±m^jmm^m^t 

7?CDft^itfe^:il©-fey h(W52~m2)£irZ> i &mi$$>2> B «A:*J 1/$?* * 13 1© 
#mx.lCJ; y, £tA;fcrl^x# 13 1 ICfey h^nfc^-* £f«&Lfc#&T% 

(W52~ W59) ^ T EI 9 So 
[0 115] 

3 1 CD l/^*#k7lCigK3!!U W53©£^B#CW53£l/^#k6tCi&j£U W54©£ 
/&B£tCW54£l^;*#k5lCJ&j£U W55(D£j&H#lCW55£ l/^X #k4lC5&S£U W56 
CD £ m m iZ W56 £ 1/ ^ ^ # k3 IC lf£ j£ L > W57CD £ 1$ }C W57 £ U P X # k2 IC b 
, W58CO£/&B£fCW58& l/^X ^kltCSfgSlU W59©^^{CW59^kO{C^-T-5 Zl 

^A*i^^^^ 131 cDSif«A^cD-fey K£tfo£Lfc:£&T&*gi 1 

ZLCD^, -fe #10 5 (SEL#B) „ -fe I/* # 1 0 7 (SEL#C) , tl/?^10 
9 (SEL#D) , tl/^*lll~113 (SEL#E~SEL#G) 1 1 1 3 IC^ 

<Byte Sub3E3lia»©#M<ft> 
Byte sub^^S-eii. *L%lZ3 2 tfy h#^©Byte Sub^^^Uff LT 
[0 116] 

fc£;Ui. ®9 C^1-§^>^rL-;t/g|StCigttP>*i£Sub ByteEJJgl 08^7 
K7T>^^a>§P©Byte Sub^g|!lJji&£:£JE>f|;-f-s r £iCoVNT#glo 
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EH&2 0 6 7b^Byte Sub^Hf!S& 2 0 7 /\©AiJBSIN$:, 0 9 iZ^mi^m^ 

ds?v^§i o icD-bi/^^ i o i <dmv>? *®Mc\zmm-tz>o ££IC, as* 

i4j^ny?/^iSl 0 lCDSub ByteEIg&l 0 8 ®4tf)Byte Sub^ 

mtlIS^2 0 7©m*BS0UTilUT'fel/^^ 2 0 StCg&rr*. 
[0 117] 

Sub Byte®j&l 0 8 fcMVNTByte Sub^^tS fcff O ^iCtt, 3 iC^t- 
J^C -felx^^ 1 0 7 (SEL#C) ©tl/^^fef 5ctU (S 
EL#D) 0D-fel^#f£g£b ^©ClillCioT, Ifi^it^fiRn S^y ^» 1 

0 1 ©Sub ByteEfj&l 0 8 £M V\T5 > K7 7 > V > 3 >§P<DByte Sub^g|#L 

m zmft-t z> r t # «rtg £ & * . 

<Byte Sub^iaj^> 
Byte Sub^g|#l3ite> 8 bf */ h#^*e©^jR?g#i:fT^Wi:©ffi*^-t)-&"e 

mmznT&v. m^tmz^^xitmmmm^n^r=.mz^mm^mn u 

sub^MSS:, «P#fl:«F^*#fl:i*K:ev^T*«cDia»T*^J6'rsfc«>K:, 0 

[0 118] 

01 oizm-twe sub^$nmg3 9 i it, ^^mnnuw-m^B, 92t, t 
u*#3 9 3, wwmnmn 3 9 4 , Hff#^M^jsc3snis&3 9 5, -&i/?#3 

[0 119] 

•fei^^^3 9 3«, A^-^iitt^Mff^jaiinafta 9 2©m*^A^$ 

tlT^3UV>-rtl*^^S:^^IlIJi&3 9 4 IC A*?" 5 <fc 3 IC^^tlT V%S„ 

1^**3 9 6&, mmMm&z$ zn&tizm^itmftmmMm&z 

[0 12 0] 

HgHf-ffclSlcM:, -fe 3 9 3 fcA^-^fllllCU 3 9 6 £HtHHf; 
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[0121] 
[0 12 2] 

mi] 



r 


y<? 


— 




1 


0 


0 


0 


1 


1 


1 


n 




f x <0 


+ 


f M 










1 


1 


0 


0 


0 


1 


1 


1 








1 




ya 






1 


1 


1 


0 


0 


0 


1 


1 




x 2 




0 










1 


1 


1 


1 


0 


0 


0 


1 








0 




V4 






1 


1 


1 


1 


1 


0 


0 


0 




X4 




0 




V5 






0 


1 


1 


1 


1 


1 


0 


0 




x 5 




1 




Ve 






0 


0 


1 


1 


1 


1 


1 


0 








1 




yzJ 




L 


0 


0 


0 


1 


1 


1 


1 


1 J 




L x ?J 







[0 12 3] 

[0 12 4] 
[8t2] 



Yo 


















+ 


X4 


+ 


X 5 


+ 


X 6 


+ 


X 7 


+ 


1 


yi 




*o 


+ 


x i 














+ 


X 5 


+ 


X 6 


+ 


X 7 


+ 


1 


y 2 




Xq 


+ 


x i 


+ 


x 2 














+ 


Xe 


+ 


X 7 






y 3 




Xo 


+ 


x i 


+ 


X2 


+ 


X 3 














+ 


X 7 






y 4 




Xq 


+ 


x, 


+ 


x 2 


+ 


x 3 


+ 


X 4 


















y 5 










+ 


x 2 


+ 


x 3 


+ 


X 4 


+ 


x 5 










+ 


1 


y 6 












X2 


+ 


Xs 


+ 


X4 


+ 


X 5 


+ 


Xfi 






+ 


1 


y 7 
















x 3 


+ 


X4 




x 5 


+ 


X 6 


+ 


X 7 







[0 12 5] 
[0 12 6] 
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[ft 3] 
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0 
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0 










( 0 








1 


0 


0 


1 


0 


0 


1 


0 








0 


V2 






0 


1 


0 


0 


1 


0 


0 


1 




x 2 




1 


Y3 






1 


0 


1 


0 


0 


1 


0 


0 




x 3 




0 


Y4 






0 


1 


0 


1 


0 


0 


1 


0 




X4 




0 


V5 






0 


0 


1 


0 


1 


0 


0 


1 




x 5 




0 


ye 






1 


0 


0 


1 


0 


1 


0 


0 




Xe 




0 








0 


1 


0 


0 


1 


0 


1 













[0 12 7] 

[0128] 
[«4] 



y 0 = x 2 + x 5 + x 7 + 1 

*i = Xo + x 3 + x 6 

y 2 = x, + x 4 + x 7 + i 

y 3 = X„ +X 2 + Xg 

y 4 = x, + x 3 + x 6 

y 5 = x 2 + x 4 + x 7 

Ve = Xq + x 3 + x 5 

y 7 = x, + x 4 + x 6 



[0 12 9] 

mm : fam®<D$*>, m&-?2>mnMmz&mit?2>z.£T' i 6m©exor^4m© 

[0 13 0] 
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s„ z.zv=bm^kmftpmwm&£mmiz, '&mtmz&^Tm4izB-t&? 
?t>, mm-t ^>mm.^m^m w^tt'i 3f@©ExoRnn&£2Mtf>NOT& 

M*^-t>-& s r. i: vmm-t z> r £ # "Tig n £ „ 

[0131] 

m^itmftpmwmm<Dm<DWitw i 3 fc^t-, 

AiJi/^^4ll, ffi*l/i;x^4i4, ^ifc^M l/^x# 4 l 

[0 13 2] 

St 1 tf>*f22gl 1 ^(Dfem*. 1 O©^3offlTil5o0"l ,, t'^fJ, 1 

h lzmi&ZftT*<\Z> 0 Z.nfr*>. AtHsPXtt 4 1 I©x0,x4,x5 
,x6,x7<D3-l^y h&n— -X— hi>:7 h £-tt&;tf <oi&3llin& 4 1 2 {CA^LTEXOR 

a » £ Hff -r s z. t. -e, I5c i ©*ja^ 1 ^©fi^mn £^e>3£ 

[0133] 

^Ml/^^4 1 3JC&, T&tfy h^e>Jl!glC|SCl*jaS2^© 

•£&#e>«:T&i^y h©ffi£i&3iliii&4 1 2icAijLEX0R*gutL&ii^T-r£:: h-e 

, t!tl^m2^©^J^$:^fe)ri:^T*^-5 0 
[0 13 4] 

ZL©ZltfCj;»K a#i^;*#4 1 1 \Z?-#jfi±y Siao^n 
y ^T*yO*^#$tiTm*l^^^^4 1 4'jc»j»sti« 0 &©*ny*-e&, yl 
#t§IW£*\,Tai;fri^x#4 i4icM$£*w aTJW#^#m3£^rLT 8 ? 

n*/*T* (y7,y6,y5,y4,y3,y2,yl,y0) <DWt&tf&T ? Z> a Z<DWr£s<Dmmm$& 
4 1 2 »5M©EX0RllII&r^2(D^^ ! aS:^f-r-g>ii:^nri§i:^-5. 
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[0 13 5] 

^.(D^itmmmm-mmt. a?j 1/^**4 1 5, &i7i^x#4 is, ^ 

AilW^ZA 1 5. mj]VV7,Z4 1 8, ^#^1/^X^4 1 
[0 13 6] 

m 3 otaam 1 ^©^ma. 1 -oofitf 5 o<zr<r t 3 ^©"r^M^^it-e 

5<Dx2,x5,x7©#fcfy h&'n— b*/? h US mi& 4 1 6tCA*L/ 

o 

[0 13 7] 

^tS[^ffli^^^4 i 7 Kit, T&^y bfr*>mizm3£im&2.m<z> 

tftA^STfi^y h«fit&lfeailIJ^4 1 6}CA7JbEX0R?glt^llff-r-5ri:-e 
, ISC3*ja^2«©ff^J^?rtfei3i:^T*#So 
[0 13 8] 

z:cd;i£&c<m;, A#l^*#4 l 5ic^-##-fey *&f£>*n 

lCjlg&mil&«£l^7bT8?a-/#T* (y7,y6,y5,y4,y3,y2,yl,y0) tf^Jltf 
%7tS. r©i^0ilM4 1 6tt3^©EX0Riaii&T^4©?g^S$:iefT 

(ttffil) 

f£U ATJt 2 -* £iaSBRound Key©5*>© 1 o £:EX0R?i|^££||?f-r£EX0RSI# 
Byte Sub^$ % Shift R«r£'fJk Mix Column^gl, Round Keying £^tfRo 
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und#L3S Z&mmmnir 6 Round#l3M fc&flM.*9tf>K77>*S/a>SPK:«fc 
U A±^-# £f«IBRound Keyjc J:««iP#fb/tt-&ft«taS:tjfgH«ia^D *y * Jl 

v ?&\z#m-*z> j m nzMZk.. mmmn-fu y *«#jctjrgBRound Key©^ 

*Ajl7-$lZtan-tZ>%i 1 Round KeyflH*llH»i:, ftfiEfg 1 Round Key#D||[IIg§ 

*ia»©ffi^lB^ff^n^^*#lCA*StlByte Sub^&£|g^ &Byte Sub 

#lCA*$tlttfSHRound Key©ffi&i&3HHfT y *«4§lCfll!i¥"* -S^ 2 Round K 
eyjium-m&h. BttfH^2Round Key^tmS^©m*lC*f LTMix Column^$|£|| 
frtSMix Column^$!®{&£, tffSBfS 1 -fe 1/ * # , t^lS U #5&Shif t Row^ 
$HS5&, Byte Sub^mia^ Mix Coliimn^IlfJiS|©ffi^7©^*»V^^lo$:ttf 
ia^2Round Keyinmiaa&Cm*i-Sm2i2 h $:#^ti:-r-5 

[0 13 9] 

(#IB2) 

(#133) 

tufH^a^n >y 1 2 8 fcf y hT*& »J, B&fB^T^n *y 3 2 \£y h 

T*&Stfia 1 £ fc\$ 2 lCf5«©Bt#mi^o 
[0 14 0] 
(tfSB4) 

BtffBHiHf l^g&gtf 1 2 8 *y K 19 2fcfyK 2 5 6 If y h 0) ? *>© V>T 
tl^T'&SfiflB 1-3 lCgH«<Z>Bi-^®j& 0 
[0 14 1] 

grfgHByte Sub^®i&fcL A±5=- * iCM L TfT#JS#&3l*T"r Zm^tmft 
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n-zmf-tz siRisia t > tff m& n&mm nj^mti^n^^-^izMhrnm 

[0 14 2] 

(#SH6) 

[0 14 3] 

(#SB7) 

iagB^f tfi^JiS^SP £ Btf fB^#>ffcff &mW® te, 1 * n y V V l fcf y h 
H£*T e> <fc e> KEX0R[I|&£^LT V>£tfiB 5 lCfB«©Hi#IIfi&o 
[0 14 4] 
(#138) 

h^-**^imt'&^itmzi&^xmm\zAii^&z-h\z&*), ttrsB 

[0 14 5] 

(#SB9) 

tuiBMix coiumn^nij?&«, mm@^©^©m^^iasa^com^©^ 

[0 14 6] 

(tfSB 1 0 ) 

B«!HMix Column^HIS&li, 8 ¥ y h#&T*m#§^^fg& 4 O^f^^f^ 
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4 ^(Dmwm&mMzm^Tmmmmmmmnzmfi-tzmom&t fc^-rs 

[0 14 7] 
(#13 11) 

5tfiB9£fcttl 0 tcfB«©Bt#ISIS&o 
[0 14 8] 
(#13 12) 

[0 14 9] 

(#ga 13) 

m j %mzmmmfT7uv9&K.mvitify hm^mhTmii-t&m feist 

ti^-ffrfr 1 o $:^&5tCffi^-r-Sll 6 M X 
ttrfBH 6 * # © ffi;fr £ D - 7^ - S> 3 § Rot By tej&Mmm h > 

l o *m${83izmjj-t 7 -fe * # 

BtffBm6-feU^^©ffi^i:i&fBSub Byte^lUl^CDffi77^A*Sn, ^1**1^ 
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mm & mn -t & m 2 exorhi8& h % 

und KeySrtSIB^fr^n y >? -BkKMlfcir Z>\f y h mmzftmz tvfcjfc*:!! £ LT 
^•TSj£^:ltx-!r^3.-;i/till^$:^-t^)#IHi~ 1 2<z>wi*ti^lc|B^©Bip# 

[0 15 0] 

(#IH14) 

msm6iz u>r#i$. mm^v ^70^©^^^ 2ms, 4©b, 6 

e>lC#/&£*lTV^tf#El 3 ICS2«©B|#I1IB&o 
[0151] 
(#121 5) 

!&SB* 7 -fe I/* * KtfrgB^IBI l/S;^ #^Shif t Row^tmi^^ffi^^ATJ^ ti 

, laiasub Bytemmms&<Dmj]zmm2iz u^^izA^-r^^tiz^. y, taia 

Sub Byte^rtSim8&tifflBRound^iag|5©Byte Sub^#||in&£ #IH 1 
3*fcttl4 CIB^CDBif#|@IJ^ 0 
[0 15 2] 

[^qa©^] 
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[hi] 

RijndaelT;i/^i;XAlCJ;-5 AE SO^M^U V?m„ 

[03] 
[04] 

*l6^©i|ISg^^{c$gffi$n^^^>F7T>^>>3>as©^n^^0 o 

[05] 
[06] 

Mix Column^^lH^CD^n y 9 0 O 
[07] 

ffe»*CD*fiR«:^'r * *0 O 
[08] 

[09] 

[01 o] 
Byte Sub^i||ltg&<D^n <y V 0„ 
[01 1] 

«F#ffc#f?W$fcl¥@»<B:7n ^ *0 O 
[01 2] 

[013] 
[014] 
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mm*! 
[01] 
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*\ 

A 
A 



CM 

co co 



CO 
CO 



CO 



■J TO CO CO CO CO CO 

till Ml 




I 
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[02] 



@§ = = 128bttor 192bit 

KeyExpansion ( byte Key [ 4 * Nk] word W [ Nb * ( Nr + 1 ) ] 



{ 



fbr(i=0;i<Nk;i++) 

W [ i ] = ( Key [4 *i ] . Key [4* i + 1] , Key [4* i + 3] ) ; 
fior(i=Nk;i<Nb*(Nr+1 );!*+) 
{ 

temp = W [ i - 1 ] ; 
if(i%Nk = = 0) 

temp = SubByte ( RotByte ( temp ) ) ~ Rcon [ i / Nk ] ; 
W[i] = W[i-Nk]^temp; 

J 



= = 256bit 

KeyExpansion ( byte Key [ 4 * Nk] word W [ Nb * ( Nr + 1 ) ] 



{ 



for ( i = 0 ; i < Nk ; i++ ) 

W [ i ] = ( Key 1 4 * i ] . Key [ 4 * i + 1 ] . Key [ 4 * i + 3 ] ) ; 
fbr(i = Nk;i<Nb*(Nr+1);i-H-) 
{ 

temp = W[i-1 ]; 
if(i%Nk = = 0) 

temp = SubByte ( RotByte ( temp ) ) ~ Rcon [ i / Nk ] ; 
else if ( i % Nk = = 4 ) 

temp = SubByte ( temp ) ; 
W[i] = W[i-Nk;T temp ; 

} 



40 


CPU 




Coprocessor 

ByteSub3£» ' — 


/51 


41 






MixColumn^Sl ' — 


/52 



50 
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[04] 
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[BT5] 
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[H6] 



362 363 
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/ / | 32bit / ■ 

-mwaq jSISSaj iant&j 
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